Posted by joakimk, Wed Oct 29 17:27:00 UTC 2008

One way of speccing parameter filtering.

    filter_parameter_logging :password

    it "should filter password" do
      before_filter, after_filter = {}, {}
      before_filter['user'] = { 'username'=>'foo', 'password'=>'bar' }
      after_filter['user'] = { 'username'=>'foo', 'password'=>'[FILTERED]' }      
      controller.filter_parameters(before_filter).should == after_filter
    end

Filed Under: | Tags: controller filter_parameter_logging logging rails rspec ruby security